san-2-s7.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:72:3b:d2:f8:37:44:e6:76:88:14:a5:1a:76:95:94 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:72:3b:d2:f8:37:44:e6:76:88:14:a5:1a:76:95:94
Serial Number (int): 12556187180837055377838100786189866388
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c1:84:93:8c:84:41:e6:37:1b:e1:f1:d4:4d:fc:54:c8:d0:e1:e3:2c
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 7d:72:bd:49:54:9c:5a:94:40:1f:35:95:a2:5b:58:5b:e8:81:e5:e0
Fingerprint (sha256): 67:7a:99:69:be:80:59:84:88:e2:79:e0:4d:21:76:46:95:c0:5b:39:24:b1:9d:17:94:a0:aa:64:27:1b:9a:35

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-2-s7.tlsprovisioning.exacttarget.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-2-s7.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-2-s7.tlsprovisioning.exacttarget.com
image.experience.michelin.com
image.gavi-vaccinealliance.org
image.global.jeccomposites.com
image.info.endeavourconsumer.com
image.info.mapfre.es
image.info.pepcidprofessional.com
image.innatpatricksquare-email.com
image.jjconsumerprofessional.co.uk
image.lidlhome.lidl.com
image.m.afdigital.com
image.mail.avantitravelinsurance.co.uk
image.mail.aveenomd.com
image.mail.beautyluxe.cl
image.mail.bpd.nl
image.mail.cerave.ca
image.mail.getninjas.com.br
image.mail.janssenpro.jp
image.mail.laroche-posay.com.ar
image.mail.legendstour.com
image.mail.mugler.ca
image.mail.payingtoomuch.com
image.mail.professionalproducts.loreal.ca
image.mail.rbhconnect.ca
image.mail.tnt.com
image.mail.valentino-beauty.ca
image.mail.vichy.com.ar
image.mail1.moneytimes.com.br
image.mails.astonmartin.com
image.maxpreps-email.com
image.members.lexus.jp
image.news.loggi.com
image.newsletter.marvelis.de
image.patientsupport.emdserono.com
image.promotions.sprouts.com
image.sfmc.petfinder.com
image.sfmctest.mconnectus.com
image.shokuiki.tokiomarine-nichido.co.jp
image.simplify.vivint.com
image.toyota-th.com
image.unicoistatepark-email.com
image.2merck.com
image.advmail.georgetown.edu
image.aesculap-academy.news
image.beautynews.mx
image.community.hillel.org
image.connect.udayton.edu
image.cropnutrition.mosaicco.com
image.dm.felissimo.co.jp
image.e.actalentservices.com
image.e.flightcentre.ca
image.e.hetvergetenkind.nl
image.e.justrightpetfood.com
image.e.ldvtravel.ca
image.e.libertytravel.com
image.e.localiza.com
image.e.onlineloans.com.au
image.e.outdoors.org
image.e.purina.com
image.e.purinastore.com
image.e.woolloo.com
image.email.cbssports.com
image.email.chandon.com.br
image.email.chateaugaloupet.com
image.email.fundacionmapfreguanarteme.com
image.email.infinitylaw.net
image.email.jnjbrasil.com.br
image.email.lidl.pl
image.email.mycareclubrewards.ca
image.email.nick.com
image.email.oporto.com.au
image.email.pvhba.com
image.email.scprt.industries
image.email.teladochealth.com
image.email.trocaire.org
image.email.westernsydneyonline.edu.au
image.email-bylawyers.com
image.emails.dteopen.com
image.emails.pmiandu.com
image.emails.pmiopen.com
image.email-us.lorealprofessionnel.com
image.endurance.usatventures.com
image.e-vanguard.com.au
image.e-vanguardjapan.jp
image.events.usatventures.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-2-s7.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3EighDo6ddSsktdtZYx
ttpXNBEubKCplGOL5D/JJ0GK5ub6dJEACv8PomuEN42vOUPYmQ39bMJq6AfPEvL/
Eej6nD+smE490mdVn/LCHtOfAJXNDNn1DiThqW8G+3RGtXzhI2nc9lKds5rq8UMC
X1dDgUKNM2agyTWFFBLM3/q7C9YexyYFY7n8D2x4e3LhTzHBYqxjXOwjjTrQ49ya
SwAkli2PSw+vk5K64Elj43BwLFkJ6HTzL2dRMODyagfQTLpGAcTLlSi8EsTTTBSr
2Q2RSVqveGKOxuYKCYsszDwLAVUBz9RDoHx1E33MCLfVexlSM5noqpbhGmMwxg0K
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12556187180837055377838100786189866388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-2-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20632632557221288652458672264477876154217844622910956461020278476176714482336996547632300090191280120405067100398763546359441591655262570043441841398117383628922869084813053054999134916584938693595142235640890181078993199793353999576663401655161584830709543405845097660305406934009885647932714053723640438476375883175100081792883777800874531187582226271474031781682705565190641449865300306679807205155400864453874766136396249210684424805438785231175638426411460272552588460635688818676903749570495771046278420856512420854379234195839123258260254818703509386794180184732927943139382987026792178136438347492205683083809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c184938c8441e6371be1f1d44dfc54c8d0e1e32c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-2-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.michelin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gavi-vaccinealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global.jeccomposites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.endeavourconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mapfre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.pepcidprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.innatpatricksquare-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.jjconsumerprofessional.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lidlhome.lidl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.afdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.avantitravelinsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.aveenomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.beautyluxe.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bpd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cerave.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.getninjas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.janssenpro.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.laroche-posay.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.legendstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mugler.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.payingtoomuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.professionalproducts.loreal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rbhconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.tnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.valentino-beauty.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vichy.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail1.moneytimes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mails.astonmartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.maxpreps-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.lexus.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.loggi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.marvelis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.patientsupport.emdserono.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.promotions.sprouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.petfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmctest.mconnectus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shokuiki.tokiomarine-nichido.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.simplify.vivint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.toyota-th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.unicoistatepark-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.2merck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advmail.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.aesculap-academy.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.beautynews.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.community.hillel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cropnutrition.mosaicco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.felissimo.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.actalentservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hetvergetenkind.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.ldvtravel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.libertytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.localiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.onlineloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.outdoors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.purina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.purinastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.woolloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chandon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chateaugaloupet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fundacionmapfreguanarteme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.infinitylaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.jnjbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lidl.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mycareclubrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.oporto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pvhba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.scprt.industries'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.teladochealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.trocaire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.westernsydneyonline.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-bylawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.dteopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pmiandu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pmiopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-us.lorealprofessionnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.endurance.usatventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-vanguard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-vanguardjapan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.events.usatventures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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